Email: 575122 Autolearn: 0 AvgScore: 2.53 AvgScanTime: 1.49 sec Spam: 173891 Autolearn: 0 AvgScore: 13.49 AvgScanTime: 1.62 sec Ham: 401231 Autolearn: 0 AvgScore: -2.22 AvgScanTime: 1.43 sec Time Spent Running SA: 237.80 hours Time Spent Processing Spam: 78.15 hours Time Spent Processing Ham: 159.65 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 173483 99.60 99.77 99.53 2 HTML_MESSAGE 167709 91.40 96.44 89.21 3 DKIM_SIGNED 160221 74.69 92.14 67.13 4 XM_DK_Pass 153086 72.57 88.04 65.86 5 DKIM_VALID 150782 71.55 86.71 64.98 6 XM_B_Unicode 147375 77.33 84.75 74.12 7 RELAYCOUNTRY_US 138195 82.19 79.47 83.37 8 XMListUnsubscribeExists 128029 53.98 73.63 45.47 9 XM_B_SpammyWords 126683 52.74 72.85 44.02 10 DCC_CHECK 125157 42.46 71.97 29.66 11 DKIM_VALID_AU 112733 56.31 64.83 52.62 12 XM_DK_Undo_02 80917 17.52 46.53 4.95 13 XM_B_Unicode3 78265 44.13 45.01 43.74 14 XM_B_SpammyWords2 75656 25.14 43.51 17.18 15 LOC_TINY_FONT_1 67674 28.18 38.92 23.52 16 BAYES_50 66372 52.17 38.17 58.23 17 BAYES_99 62278 13.39 35.81 3.67 18 TR_XM_DKIM_Undo 61358 12.05 35.29 1.98 19 HTML_FONT_LOW_CONTRAST 60646 28.37 34.88 25.55 20 DKIM_VALID_EF 57153 27.55 32.87 25.25 21 RCVD_IN_MSPIKE_H2 55892 27.56 32.14 25.57 22 FVGT_m_MULTI_ODD 55490 25.74 31.91 23.07 23 MIME_HTML_ONLY 52891 24.14 30.42 21.42 24 T_KAM_HTML_FONT_INVALID 51404 22.08 29.56 18.84 25 BAYES_999 49099 10.50 28.24 2.82 26 DCC_CHECK_NEGATIVE 48714 57.51 28.01 70.29 27 TR_DCC_Bayes_99 42994 8.32 24.72 1.21 28 T_TM2_M_HEADER_IN_MSG 41133 25.25 23.65 25.94 29 TR_XM_DK_Unsub 41114 15.46 23.64 11.92 30 XMSubLong 40266 23.09 23.16 23.06 31 RELAYCOUNTRY_META 35500 8.82 20.42 3.80 32 XM_Multi_Part_URI 32149 13.83 18.49 11.81 33 TR_XM_SpammyRelay 28723 6.48 16.52 2.12 34 LOTS_OF_MONEY 27821 9.02 16.00 5.99 35 TR_XM_SpammyWords2 26606 4.91 15.30 0.41 36 XM_B_SpammyWords3 25720 7.66 14.79 4.57 37 TR_XM_SpammyWords4 25702 7.39 14.78 4.19 38 TR_MAX_INTL_RELAY 25422 8.61 14.62 6.00 39 RCVD_IN_BL_SPAMCOP_NET 25384 4.88 14.60 0.67 40 XM_B_Unsub 25193 8.98 14.49 6.60 41 TR_XM_BayesUnsub 24281 7.92 13.96 5.30 42 UNPARSEABLE_RELAY 22249 9.93 12.79 8.69 43 BOTNET_IPINHOSTNAME 21312 6.13 12.26 3.48 44 TR_XM_SPAMCOP 21017 3.96 12.09 0.44 45 RELAYCOUNTRY_CA 19576 4.23 11.26 1.18 46 RCVD_IN_MSPIKE_H3 16910 6.70 9.72 5.38 47 RCVD_IN_MSPIKE_WL 16910 6.70 9.72 5.38 48 BAYES_80 15609 5.23 8.98 3.60 49 BOTNET 14693 3.30 8.45 1.06 50 XM_Evil_Numbers_Gen 14362 8.18 8.26 8.15 51 BAYES_60 13956 8.08 8.03 8.10 52 XMBody_17 13257 2.69 7.62 0.56 53 FSL_BULK_SIG 12205 4.17 7.02 2.94 54 TR_XM_UnparsRelay 11619 2.88 6.68 1.24 55 XM_Body_Dirty_Words 11522 4.11 6.63 3.02 56 LotsOfNums_01 11041 6.92 6.35 7.17 57 XM_UncommonTLD01 10813 4.23 6.22 3.37 58 UNTRUSTED_Relay 10389 2.75 5.97 1.35 59 DKIM_INVALID 9439 3.15 5.43 2.16 60 XMSubMetaSx_00 9394 4.40 5.40 3.97 61 MPART_ALT_DIFF 9361 7.87 5.38 8.95 62 BAYES_95 9058 3.25 5.21 2.40 63 HTML_IMAGE_RATIO_02 8973 4.27 5.16 3.88 64 TR_XM_PhishingBody 8722 2.58 5.02 1.52 65 XM_H_GMP 8561 5.37 4.92 5.57 66 XM_B_SEO 8494 2.29 4.88 1.16 67 XM_B_Phish_Phrases 8491 3.47 4.88 2.86 68 XM_H_Long_From01 8447 4.95 4.86 4.99 69 TooManyTo_001 8373 6.67 4.82 7.47 70 HTML_IMAGE_RATIO_06 8210 4.65 4.72 4.62 71 XM_SPF_SoftFail 8192 3.47 4.71 2.93 72 T_FILL_THIS_FORM_SHORT 7980 2.00 4.59 0.88 73 XMSexyCombo_05 7784 2.61 4.48 1.79 74 TR_XM_SEO4 7665 1.81 4.41 0.69 75 XM_OfRef6 7635 2.19 4.39 1.24 76 XM_B_Investor 7444 2.27 4.28 1.40 77 HTML_IMAGE_RATIO_04 7238 11.43 4.16 14.58 78 HK_RANDOM_REPLYTO 6974 1.30 4.01 0.12 79 TR_LOTS_OF_MONEY3 6753 1.51 3.88 0.48 80 FONT_INVIS_LONG_LINE 6746 1.20 3.88 0.04 81 MIME_HTML_MOSTLY 6729 2.77 3.87 2.29 82 TR_XM_SpammyWords5 6631 1.95 3.81 1.15 83 XM_B_SpammyTLD 6298 2.55 3.62 2.09 84 T_XMDrugObfuBody_14 6073 2.12 3.49 1.53 85 XMNumbers 5914 2.68 3.40 2.36 86 HTML_IMAGE_RATIO_08 5775 2.40 3.32 2.00 87 XMStrtUSub 5768 8.15 3.32 10.24 88 TR_XM_BayesRelay 5674 0.99 3.26 0.00 89 RCVD_IN_VALIDITY_SAFE 5464 4.25 3.14 4.73 90 MIME_QP_LONG_LINE 5447 4.19 3.13 4.64 91 XM_UB50 5388 1.49 3.10 0.80 92 XMDiploma_00 5337 2.09 3.07 1.66 93 XM_URI_RBL 5203 1.01 2.99 0.15 94 MIME_HTML_ONLY_MULTI 5130 5.93 2.95 7.22 95 XM_CamelCaseFrm001 5018 2.52 2.89 2.36 96 T_XMDrugObfuBody_08 4980 1.78 2.86 1.31 97 USER_IN_DEF_DKIM_WL 4958 9.52 2.85 12.41 98 SpammyFromTLD_01 4866 1.37 2.80 0.75 99 TM2_M_URI_OPT_OUT 4821 1.87 2.77 1.47 100 TR_XM_FormFill 4740 0.83 2.73 0.01 101 TM2_M_VERY_LONG_WORD 4722 1.64 2.72 1.17 102 RCVD_IN_VALIDITY_CERTIFIED 4663 3.71 2.68 4.16 103 RCVD_IN_VALIDITY_RPBL 4594 0.89 2.64 0.13 104 T_TooManySym_01 4516 4.10 2.60 4.75 105 XM_B_SpammyWords4 4498 1.22 2.59 0.63 106 XM_B_Unsub2 4223 1.66 2.43 1.33 107 HOSTED_IMG_MULTI_PUB_01 3971 0.70 2.28 0.02 108 TR_XM_INV_DKIM 3730 0.69 2.15 0.06 109 RELAYCOUNTRY_AU 3530 1.04 2.03 0.62 110 T_REMOTE_IMAGE 3465 2.80 1.99 3.14 111 TR_Mismatch_TLD_02 3463 0.64 1.99 0.06 112 SpammyFromTLD_02 3377 0.84 1.94 0.37 113 T_XMHurry_00 3323 0.91 1.91 0.47 114 MAILING_LIST_MULTI 3274 2.20 1.88 2.33 115 XMPhish14 3253 0.93 1.87 0.52 116 XMPhish30 3228 0.93 1.86 0.54 117 SUBJ_ALL_CAPS 3119 1.44 1.79 1.29 118 URI_TRY_3LD 3110 1.06 1.79 0.75 119 TR_XM_NoHeaderRelay 3045 0.60 1.75 0.10 120 FROM_EXCESS_BASE64 2956 1.83 1.70 1.88 121 ALL_TRUSTED 2911 10.03 1.67 13.66 122 HTML_MIME_NO_HTML_TAG 2844 1.71 1.64 1.74 123 XMStockSpam_06 2826 1.25 1.63 1.08 124 XM_DK_Undo_01 2745 1.70 1.58 1.76 125 ANY_BOUNCE_MESSAGE 2737 3.28 1.57 4.01 126 BOUNCE_MESSAGE 2735 3.28 1.57 4.01 127 XMBrknScrpt_02 2721 0.98 1.56 0.73 128 DKIM_ADSP_CUSTOM_MED 2641 1.00 1.52 0.78 129 BAYES_40 2636 3.92 1.52 4.97 130 URIBL_DBL_SPAM 2531 0.45 1.46 0.01 131 TR_XM_PHPForged 2454 0.65 1.41 0.31 132 URI_HEX 2415 1.10 1.39 0.98 133 XM_HighProb1 2384 0.42 1.37 0.00 134 TR_XM_PHPDW 2376 0.63 1.37 0.31 135 NML_ADSP_CUSTOM_MED 2369 0.78 1.36 0.53 136 TR_XM_FormFill2 2353 0.63 1.35 0.32 137 XM_H_PHPOS 2321 0.62 1.33 0.31 138 XMGenDplmaNmb 2301 0.94 1.32 0.77 139 HTTPS_HTTP_MISMATCH 2288 0.95 1.32 0.78 140 KHOP_HELO_FCRDNS 2278 1.14 1.31 1.07 141 RCVD_IN_IADB_LISTED 2215 2.64 1.27 3.23 142 XM_DIRTYINTL 2193 0.47 1.26 0.13 143 XMHTML_After_End 2185 0.71 1.26 0.48 144 XMReplyNow 2163 0.51 1.24 0.20 145 HTML_TAG_BALANCE_BODY 2145 0.69 1.23 0.46 146 DKIM_ADSP_NXDOMAIN 2109 0.55 1.21 0.26 147 DIET_1 2106 0.48 1.21 0.17 148 XM_B_Phish66 2104 0.57 1.21 0.29 149 RCVD_IN_IADB_SPF 2013 2.32 1.16 2.83 150 XM_SendGrid 1969 1.17 1.13 1.18 151 RCVD_IN_IADB_SENDERID 1908 2.10 1.10 2.53 152 RELAYCOUNTRY_IN 1903 0.38 1.09 0.07 153 RCVD_IN_IADB_DK 1880 2.05 1.08 2.47 154 XMLngstWrd_00 1860 0.92 1.07 0.85 155 XMSubMetaI_00 1852 0.65 1.07 0.48 156 FORGED_GMAIL_RCVD 1844 0.64 1.06 0.46 157 TR_LOTS_OF_MONEY2 1836 0.51 1.06 0.27 158 T_MONEY_PERCENT 1836 0.51 1.06 0.27 159 XMSexyCombo_01 1835 0.69 1.06 0.53 160 URI_NOVOWEL 1830 1.09 1.05 1.11 161 T_XMDrugObfuBody_00 1821 0.75 1.05 0.63 162 XM_H_Undi_Recip 1767 0.43 1.02 0.17 163 RDNS_DYNAMIC 1765 0.51 1.02 0.29 164 BOTNET_NORDNS 1760 0.31 1.01 0.01 165 AC_BR_BONANZA 1748 0.37 1.01 0.09 166 MPART_ALT_DIFF_COUNT 1747 0.67 1.00 0.52 167 BAYES_20 1744 2.78 1.00 3.56 168 TR_XM_InvalidRelay 1715 0.31 0.99 0.02 169 HTML_IMAGE_ONLY_20 1694 0.57 0.97 0.39 170 XMClaimOffer 1685 0.50 0.97 0.30 171 THIS_AD 1685 0.55 0.97 0.37 172 TooManyTo_002 1645 1.92 0.95 2.34 173 TM2_M_OBFU_COMMENT 1628 0.47 0.94 0.27 174 TR_Mismatch_TLD_01 1617 0.41 0.93 0.18 175 XM_H_Long_From02 1610 0.94 0.93 0.94 176 XM_UB99 1601 0.28 0.92 0.00 177 XMNoVowels 1570 0.68 0.90 0.59 178 RCVD_IN_PSBL 1568 0.48 0.90 0.29 179 RELAYCOUNTRY_FR 1543 0.40 0.89 0.18 180 XM_B_COPY_HTML 1524 0.76 0.88 0.70 181 TR_MetaPhish_Combo_01 1494 0.91 0.86 0.93 182 XM_B_COVIDMETA 1472 0.42 0.85 0.24 183 TooManyTo_003 1463 1.18 0.84 1.33 184 TR_XM_Base64_M1 1453 0.62 0.84 0.52 185 TR_Symld_Words 1431 1.15 0.82 1.30 186 T_STY_INVIS_DIRECT 1423 0.43 0.82 0.26 187 XM_UB60 1410 0.29 0.81 0.06 188 PDS_OTHER_BAD_TLD 1407 0.34 0.81 0.14 189 XMBdyGiftCard01 1403 0.74 0.81 0.71 190 XMSlimDrugH 1390 0.44 0.80 0.29 191 TooManyTo_004 1364 0.91 0.78 0.96 192 RELAYCOUNTRY_GB 1351 0.56 0.78 0.46 193 SCC_BODY_URI_ONLY 1323 1.65 0.76 2.04 194 AC_HTML_NONSENSE_TAGS 1310 0.24 0.75 0.02 195 TooManyTo_005 1305 0.79 0.75 0.80 196 XM_OfRef7 1294 0.34 0.74 0.17 197 XM_ProductURIs 1277 0.77 0.73 0.79 198 LongTLD 1274 0.41 0.73 0.27 199 TR_XM_Undi_Recip19 1272 0.27 0.73 0.07 200 XMPhishDuo 1271 0.23 0.73 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 399356 99.60 99.77 99.53 2 HTML_MESSAGE 357941 91.40 96.44 89.21 3 RELAYCOUNTRY_US 334506 82.19 79.47 83.37 4 XM_B_Unicode 297382 77.33 84.75 74.12 5 DCC_CHECK_NEGATIVE 282044 57.51 28.01 70.29 6 DKIM_SIGNED 269355 74.69 92.14 67.13 7 XM_DK_Pass 264257 72.57 88.04 65.86 8 DKIM_VALID 260705 71.55 86.71 64.98 9 BAYES_50 233645 52.17 38.17 58.23 10 DKIM_VALID_AU 211144 56.31 64.83 52.62 11 XMListUnsubscribeExists 182421 53.98 73.63 45.47 12 XM_B_SpammyWords 176625 52.74 72.85 44.02 13 XM_B_Unicode3 175516 44.13 45.01 43.74 14 DCC_CHECK 119012 42.46 71.97 29.66 15 T_TM2_M_HEADER_IN_MSG 104091 25.25 23.65 25.94 16 RCVD_IN_MSPIKE_H2 102596 27.56 32.14 25.57 17 HTML_FONT_LOW_CONTRAST 102532 28.37 34.88 25.55 18 DKIM_VALID_EF 101308 27.55 32.87 25.25 19 LOC_TINY_FONT_1 94381 28.18 38.92 23.52 20 FVGT_m_MULTI_ODD 92546 25.74 31.91 23.07 21 XMSubLong 92505 23.09 23.16 23.06 22 MIME_HTML_ONLY 85942 24.14 30.42 21.42 23 T_KAM_HTML_FONT_INVALID 75610 22.08 29.56 18.84 24 XM_B_SpammyWords2 68944 25.14 43.51 17.18 25 HTML_IMAGE_RATIO_04 58512 11.43 4.16 14.58 26 ALL_TRUSTED 54802 10.03 1.67 13.66 27 HTML_FONT_FACE_BAD 53943 9.58 0.67 13.44 28 BAYES_00 50334 8.97 0.73 12.54 29 USER_IN_DEF_DKIM_WL 49773 9.52 2.85 12.41 30 TR_XM_DK_Unsub 47812 15.46 23.64 11.92 31 XM_H_Trusted_IP 47397 8.24 0.00 11.81 32 XM_Multi_Part_URI 47371 13.83 18.49 11.81 33 XMStrtUSub 41086 8.15 3.32 10.24 34 MPART_ALT_DIFF 35894 7.87 5.38 8.95 35 UNPARSEABLE_RELAY 34886 9.93 12.79 8.69 36 XM_Evil_Numbers_Gen 32689 8.18 8.26 8.15 37 BAYES_60 32502 8.08 8.03 8.10 38 TooManyTo_001 29974 6.67 4.82 7.47 39 MIME_HTML_ONLY_MULTI 28965 5.93 2.95 7.22 40 LotsOfNums_01 28752 6.92 6.35 7.17 41 XM_B_Unsub 26472 8.98 14.49 6.60 42 XM_DKIMWhitelistDomains 25786 4.49 0.01 6.43 43 IN_ZIMBRA_NJ_WHITELIST 25461 4.45 0.09 6.35 44 TR_MAX_INTL_RELAY 24076 8.61 14.62 6.00 45 LOTS_OF_MONEY 24047 9.02 16.00 5.99 46 XM_H_GMP 22330 5.37 4.92 5.57 47 TR_XM_DK_Bayes 22153 4.03 0.59 5.52 48 TR_XM_DK_Bayes1 21787 3.96 0.58 5.43 49 RCVD_IN_MSPIKE_WL 21600 6.70 9.72 5.38 50 RCVD_IN_MSPIKE_H3 21600 6.70 9.72 5.38 51 TR_XM_BayesUnsub 21282 7.92 13.96 5.30 52 XM_H_Long_From01 20036 4.95 4.86 4.99 53 BAYES_40 19933 3.92 1.52 4.97 54 XM_DK_Undo_02 19873 17.52 46.53 4.95 55 TR_XM_DK_Bayes2 19080 3.47 0.52 4.76 56 T_TooManySym_01 19062 4.10 2.60 4.75 57 RCVD_IN_VALIDITY_SAFE 18988 4.25 3.14 4.73 58 MIME_QP_LONG_LINE 18627 4.19 3.13 4.64 59 HTML_IMAGE_RATIO_06 18539 4.65 4.72 4.62 60 XM_B_SpammyWords3 18348 7.66 14.79 4.57 61 TR_XM_SpammyWords4 16827 7.39 14.78 4.19 62 XMSubNoVowel 16826 3.04 0.39 4.19 63 RCVD_IN_VALIDITY_CERTIFIED 16683 3.71 2.68 4.16 64 XM_PDF 16195 3.03 0.72 4.04 65 ANY_BOUNCE_MESSAGE 16107 3.28 1.57 4.01 66 BOUNCE_MESSAGE 16104 3.28 1.57 4.01 67 XMSubMetaSx_00 15929 4.40 5.40 3.97 68 HTML_IMAGE_RATIO_02 15556 4.27 5.16 3.88 69 RELAYCOUNTRY_META 15245 8.82 20.42 3.80 70 BAYES_99 14718 13.39 35.81 3.67 71 BAYES_80 14450 5.23 8.98 3.60 72 BAYES_20 14271 2.78 1.00 3.56 73 BOTNET_IPINHOSTNAME 13962 6.13 12.26 3.48 74 XM_UncommonTLD01 13517 4.23 6.22 3.37 75 RCVD_IN_IADB_LISTED 12948 2.64 1.27 3.23 76 T_REMOTE_IMAGE 12618 2.80 1.99 3.14 77 XM_Body_Dirty_Words 12134 4.11 6.63 3.02 78 FSL_BULK_SIG 11796 4.17 7.02 2.94 79 BAYES_05 11755 2.21 0.56 2.93 80 XM_SPF_SoftFail 11747 3.47 4.71 2.93 81 XM_B_Phish_Phrases 11491 3.47 4.88 2.86 82 RCVD_IN_IADB_SPF 11344 2.32 1.16 2.83 83 BAYES_999 11314 10.50 28.24 2.82 84 RCVD_IN_IADB_SENDERID 10159 2.10 1.10 2.53 85 RCVD_IN_IADB_DK 9892 2.05 1.08 2.47 86 BAYES_95 9621 3.25 5.21 2.40 87 XM_CamelCaseFrm001 9488 2.52 2.89 2.36 88 XMNumbers 9482 2.68 3.40 2.36 89 TooManyTo_002 9406 1.92 0.95 2.34 90 MAILING_LIST_MULTI 9367 2.20 1.88 2.33 91 MIME_HTML_MOSTLY 9192 2.77 3.87 2.29 92 T_TooManySym_02 9053 1.77 0.66 2.26 93 DKIM_INVALID 8650 3.15 5.43 2.16 94 TR_XM_SpammyRelay 8517 6.48 16.52 2.12 95 RCVD_IN_IADB_VOUCHED 8468 1.65 0.58 2.11 96 XM_B_SpammyTLD 8392 2.55 3.62 2.09 97 SCC_BODY_URI_ONLY 8183 1.65 0.76 2.04 98 XMSubLongNoVowel 8140 1.46 0.15 2.03 99 HTML_IMAGE_RATIO_08 8033 2.40 3.32 2.00 100 TR_XM_DKIM_Undo 7954 12.05 35.29 1.98 101 XMSubGarbage 7936 1.39 0.03 1.98 102 FROM_EXCESS_BASE64 7544 1.83 1.70 1.88 103 HELO_NODOT 7223 1.34 0.29 1.80 104 HELO_NO_DOMAIN 7216 1.34 0.29 1.80 105 INVALID_MSGID 7215 1.31 0.18 1.80 106 XMSexyCombo_05 7198 2.61 4.48 1.79 107 XM_DK_Undo_01 7049 1.70 1.58 1.76 108 HTML_MIME_NO_HTML_TAG 6967 1.71 1.64 1.74 109 XMDiploma_00 6679 2.09 3.07 1.66 110 TO_MALFORMED 6609 1.16 0.02 1.65 111 T_XMDrugObfuBody_14 6125 2.12 3.49 1.53 112 TR_XM_PhishingBody 6118 2.58 5.02 1.52 113 TM2_M_URI_OPT_OUT 5906 1.87 2.77 1.47 114 RCVD_IN_IADB_OPTIN 5784 1.13 0.40 1.44 115 XM_B_Investor 5633 2.27 4.28 1.40 116 UNTRUSTED_Relay 5426 2.75 5.97 1.35 117 XM_B_Unsub2 5330 1.66 2.43 1.33 118 TooManyTo_003 5323 1.18 0.84 1.33 119 T_XMDrugObfuBody_08 5265 1.78 2.86 1.31 120 TVD_RCVD_IP 5250 1.12 0.69 1.31 121 TR_Symld_Words 5204 1.15 0.82 1.30 122 SUBJ_ALL_CAPS 5169 1.44 1.79 1.29 123 XMGappySubj_01 5045 0.93 0.19 1.26 124 IN_HORDE_ADDRESS_BOOK 5043 0.90 0.07 1.26 125 XM_OfRef6 4977 2.19 4.39 1.24 126 TR_XM_UnparsRelay 4965 2.88 6.68 1.24 127 TR_DCC_Bayes_99 4865 8.32 24.72 1.21 128 XM_SendGrid 4742 1.17 1.13 1.18 129 RELAYCOUNTRY_CA 4734 4.23 11.26 1.18 130 TM2_M_VERY_LONG_WORD 4705 1.64 2.72 1.17 131 XM_B_SEO 4671 2.29 4.88 1.16 132 TR_XM_SpammyWords5 4610 1.95 3.81 1.15 133 URI_NOVOWEL 4458 1.09 1.05 1.11 134 XMStockSpam_06 4340 1.25 1.63 1.08 135 KHOP_HELO_FCRDNS 4287 1.14 1.31 1.07 136 BOTNET 4260 3.30 8.45 1.06 137 XMBSHREFv2 4215 0.88 0.49 1.05 138 XMCapTrack 4004 0.85 0.49 1.00 139 URI_HEX 3940 1.10 1.39 0.98 140 XM_E_Blogspot 3917 0.71 0.10 0.98 141 TooManyTo_004 3853 0.91 0.78 0.96 142 TVD_SPACE_RATIO 3823 0.70 0.11 0.95 143 XM_GoogleGroups 3783 0.86 0.65 0.94 144 XM_H_Long_From02 3772 0.94 0.93 0.94 145 TR_MetaPhish_Combo_01 3738 0.91 0.86 0.93 146 T_FILL_THIS_FORM_SHORT 3521 2.00 4.59 0.88 147 XMLngstWrd_00 3428 0.92 1.07 0.85 148 TooManyTo_005 3221 0.79 0.75 0.80 149 XM_UB50 3208 1.49 3.10 0.80 150 XM_ProductURIs 3152 0.77 0.73 0.79 151 HTTPS_HTTP_MISMATCH 3147 0.95 1.32 0.78 152 DKIM_ADSP_CUSTOM_MED 3113 1.00 1.52 0.78 153 XMGenDplmaNmb 3105 0.94 1.32 0.77 154 T_TooManySym_03 3080 0.62 0.29 0.77 155 TR_XM_DK_SendGrid 3066 0.75 0.70 0.76 156 SpammyFromTLD_01 3020 1.37 2.80 0.75 157 URI_TRY_3LD 2993 1.06 1.79 0.75 158 XMBrknScrpt_02 2933 0.98 1.56 0.73 159 XMGappySubj_02 2932 0.53 0.06 0.73 160 XMBdyGiftCard01 2839 0.74 0.81 0.71 161 XM_B_COPY_HTML 2828 0.76 0.88 0.70 162 TR_XM_SEO4 2765 1.81 4.41 0.69 163 RCVD_IN_BL_SPAMCOP_NET 2708 4.88 14.60 0.67 164 T_Symld_Words_02 2702 0.68 0.70 0.67 165 FROM_GOV_DKIM_AU 2666 0.57 0.34 0.66 166 XM_ShortIntro_01 2643 0.63 0.56 0.66 167 T_XMDrugObfuBody_00 2520 0.75 1.05 0.63 168 XM_B_SpammyWords4 2514 1.22 2.59 0.63 169 RELAYCOUNTRY_AU 2473 1.04 2.03 0.62 170 SHORT_HELO_AND_INLINE_IMAGE 2367 0.42 0.04 0.59 171 XMNoVowels 2364 0.68 0.90 0.59 172 XM_H_PHPMailer 2350 0.62 0.69 0.59 173 XM_B_FormFill 2247 0.40 0.04 0.56 174 XMBody_17 2234 2.69 7.62 0.56 175 T_OBFU_PDF_ATTACH 2174 0.42 0.14 0.54 176 XMPhish30 2149 0.93 1.86 0.54 177 NML_ADSP_CUSTOM_MED 2143 0.78 1.36 0.53 178 XMSexyCombo_01 2122 0.69 1.06 0.53 179 TR_XM_Base64_M1 2093 0.62 0.84 0.52 180 MPART_ALT_DIFF_COUNT 2090 0.67 1.00 0.52 181 XMPhish14 2071 0.93 1.87 0.52 182 XMMoneyMeta_00 1967 0.55 0.67 0.49 183 TR_LOTS_OF_MONEY3 1934 1.51 3.88 0.48 184 XMBody_95 1925 0.38 0.16 0.48 185 XMHTML_After_End 1919 0.71 1.26 0.48 186 XMSubMetaI_00 1906 0.65 1.07 0.48 187 T_XMHurry_00 1889 0.91 1.91 0.47 188 RELAYCOUNTRY_GB 1863 0.56 0.78 0.46 189 FORGED_GMAIL_RCVD 1852 0.64 1.06 0.46 190 HTML_TAG_BALANCE_BODY 1838 0.69 1.23 0.46 191 TR_XM_SPAMCOP 1770 3.96 12.09 0.44 192 XMSexyCombo_04 1708 0.43 0.44 0.43 193 TR_XM_SpammyWords2 1649 4.91 15.30 0.41 194 XM_B_DNDMA 1609 0.47 0.63 0.40 195 USER_IN_WELCOMELIST 1597 0.28 0.00 0.40 196 USER_IN_WHITELIST 1597 0.28 0.00 0.40 197 T_MANY_PILL_PRICE 1587 0.28 0.01 0.40 198 HTML_IMAGE_ONLY_20 1576 0.57 0.97 0.39 199 XMDateMe_00 1516 0.40 0.46 0.38 200 HTML_IMAGE_ONLY_32 1511 0.32 0.17 0.38 ----------------------------------------------------------------------